Use 1024 DH for Java 6 compat

Author: adriaanm

README.md

@@ -598,9 +598,11 @@ Incorporate the cert into an ssl chain for nginx:
 
 For [forward secrecy](http://axiacore.com/blog/enable-perfect-forward-secrecy-nginx/):
 ```
-openssl dhparam -out files/default/dhparam.pem 2048
+openssl dhparam -out files/default/dhparam.pem 1024
 ```
 
+Using 1024 bits (instead of 2048) for DH to be Java 6 compatible... Bye-bye A+ on https://www.ssllabs.com/ssltest/analyze.html?d=scala-ci.typesafe.com
+
 Confirm values in the csr using:
 
 ```

files/default/dhparam.pem

@@ -1,8 +1,5 @@
 -----BEGIN DH PARAMETERS-----
-MIIBCAKCAQEA5NLmgxgKBqd59SNecEKUQOnXww8tPWpPOOtwQw3e8ZNhINxlSxsO
-oseA9lotBnlU3tKojSwHKGgp/3cm8NMJ8lwmXCZe2mIZqHOPJRmN5GayNhxpLmcM
-POKEathuHN9j0Fd3bqU3yt2GqDZ90jVp+6rCCXDK2IpoRvVlEc8D+NQMgRQVxiL8
-PnKZEK2vn+KS5h/qX4+z9BNVSSdm1aA8q0yCr6dBYYQAMUe2AFicdV0X/ETLVULZ
-BUJaQkjKn4yQfjC1p1j8vUqaCaEydDVkqAesr1K6yiCYpsMnfZf+UsXMEX7BwA4q
-1D1CI88v5GwcfsSeZNR0z45ksSz7USFnmwIBAg==
+MIGHAoGBAIT9Rv1jZ+PJl8R4iAEFbcfa8xCANtpJIi3yQzTlPeDh09LdCi1nAzZq
+JYXDsYXubmlx3h2RBJax7x8ibXUgk8YOAuBKDgt7KWfgMHtTMXSTCMfzIISqV4K4
+yt8CdMKRNZWR0b43BsXzCl2e5fBCgn3gJW4LW410LrPw+NLjDyILAgEC
 -----END DH PARAMETERS-----